search

twilio / twilio-java

A Java library for communicating with the Twilio REST API and generating TwiML.
MIT License
485 stars 427 forks source link

Update JJWT Dependency #788

Open nova-airship opened 6 months ago

nova-airship commented 6 months ago

Issue Summary

I am currently running into dependency incompatibility issues between this library and the Okta one. Both libraries utilize the jjwt-api/jjwt-impl libraries which are currently on 0.12.5 and includes some breaking changes in 0.12.#+. The latest version of the Okta library utilizes 0.12.3 while this library is still using 0.11.2 and are incompatible with each other.

I attempted to update the Okta one to the latest in order to address vulnerabilities that came with some of the other dependencies it has but ran into issues with differences between the jjwt versions. Unfortunately, this has me in a position where I cannot actually do that until this library also updates to 0.12.#+.

My request is for the jjwt libraries that are being used be updated to at least 0.12.0.

Technical details:

allantodd commented 5 months ago

I have the same issue. The cause is explained on this ticket I raised on jjwt

https://github.com/jwtk/jjwt/issues/926

tiwarishubham635 commented 5 months ago

Hi! I will take this up. Thanks!

tiwarishubham635 commented 5 months ago

One of the reasons why we did not bump the version as of now was because we were waiting for the 1.0 release as mentioned here. But if it is a blocker for multiple customers then we can bump the version now as well.

alexmacarthur commented 4 months ago

I'm also having issues with this! Would love it to be merged soon.

jerome25000 commented 1 month ago

Blocking also for me, as our server uses jjwt version 0.12.5 unfortunately not compliant with 0.11.xx and Maven/java not able to have same lib with 2 different versions at the same time (very bad!)